Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/YcPnry1nWwB6PP9pJirhuIjqW-g.roa
File: YcPnry1nWwB6PP9pJirhuIjqW-g.roa (raw, json)
Hash identifier: 5M8RpAGqTPq5dz6xVs842H2lc5hDudlnSJyT0kRmqYI=
Subject key identifier: 61:C3:E7:AF:2D:67:5B:00:7A:3C:FF:69:26:2A:E1:B8:88:EA:5B:E8
Certificate issuer: /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Certificate serial: 0BBB
Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/YcPnry1nWwB6PP9pJirhuIjqW-g.roa
Signing time: Fri 01 Sep 2023 08:36:39 +0000
ROA not before: Fri 01 Sep 2023 08:36:39 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9244
IP address blocks: 61.56.80.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3003 (0xbbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Validity
Not Before: Sep 1 08:36:39 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=61C3E7AF2D675B007A3CFF69262AE1B888EA5BE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d4:c8:31:29:81:9e:a3:4b:66:e9:0a:c6:b2:
d8:b4:03:f0:a2:02:29:09:c5:36:34:78:ff:4c:2f:
ee:18:aa:2a:9c:b6:09:4d:40:97:06:7f:b8:68:ef:
de:5c:9d:a9:b4:67:73:96:22:29:0c:3a:c7:68:93:
f0:80:79:08:45:bf:fe:71:1c:64:fe:f2:35:ab:6d:
23:f2:02:78:de:00:41:67:dd:9c:68:a1:b4:39:52:
f2:92:2a:33:73:1b:ae:2e:ae:2a:d4:51:bb:d8:e6:
18:25:6f:56:4c:69:c7:76:f7:e2:2d:6a:b0:2a:a0:
08:da:87:c3:72:1c:70:0a:33:14:74:f7:b8:2a:75:
07:13:f0:0a:f5:44:07:29:e8:e9:61:c0:fa:ac:6b:
3f:25:1a:42:d5:fe:8c:4e:8c:11:4f:da:eb:64:ad:
e8:56:04:d6:6b:79:76:ea:8f:80:f5:ea:80:ec:f9:
cf:08:14:71:3e:cf:ce:e2:01:77:22:e8:63:aa:e4:
a4:19:df:0d:ba:78:6a:c3:eb:5a:8a:9b:be:5f:58:
54:2d:06:a4:73:18:1f:aa:af:23:2e:14:cd:59:3e:
c8:20:61:0b:2a:fd:57:71:0e:dc:17:a0:12:47:2c:
f6:fc:86:be:c9:35:4e:a8:c8:21:7a:64:a6:b1:0d:
0b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:C3:E7:AF:2D:67:5B:00:7A:3C:FF:69:26:2A:E1:B8:88:EA:5B:E8
X509v3 Authority Key Identifier:
keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/YcPnry1nWwB6PP9pJirhuIjqW-g.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.56.80.0/20
Signature Algorithm: sha256WithRSAEncryption
38:89:c1:23:ec:62:33:e1:f4:75:83:f7:9a:56:99:cc:c0:31:
81:80:94:be:00:01:c1:75:7d:31:b0:48:dd:b0:71:99:26:f2:
0e:6d:e8:a0:ca:00:b9:a4:b7:a2:8a:2f:ed:c0:81:64:c1:b6:
cf:52:93:1c:7a:82:36:45:f6:74:a5:7b:47:13:02:f0:9e:46:
83:fa:df:44:68:00:b4:b3:55:28:14:a4:ff:62:50:15:5e:db:
dc:a3:98:83:3e:ce:3a:b5:78:aa:4b:5e:66:d0:de:f5:e5:12:
c4:cc:41:f2:7f:10:51:5b:e1:d5:24:a0:a5:ae:03:eb:31:67:
69:28:06:8a:06:c7:ac:ae:c7:ad:73:04:d4:43:33:88:13:a1:
c8:00:4f:02:72:30:f0:4e:2c:21:14:08:b0:18:d8:c3:53:88:
73:46:82:0d:60:8c:5b:54:d0:92:c4:9e:be:dd:11:f2:b9:67:
9e:a4:3e:26:4b:31:08:c3:62:e8:25:9c:4c:43:a8:69:19:ce:
0d:0e:f4:c4:06:15:a5:90:46:c8:a6:96:aa:b4:31:ae:5e:cd:
dc:3f:5e:c2:50:59:26:a2:03:21:82:13:87:83:c3:43:51:86:
ae:07:d3:45:1a:66:6f:d9:9c:36:3c:c1:1b:d1:88:3f:66:13:
e4:2b:c0:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:12 2024 by rpki-client on console-ams.rpki-client.org